Thread: [Exist-development] Security refactoring

SourceForge Headquarters 225 Broadway Suite 1600 San Diego, CA 92101 +1 (858) 422-6466

Hello,

The Security API @ trunk will be refactored in next 2 weeks. 

Please, let me know if any troubles.

-- 
Cheers,

Dmitriy Shabanov

Hello good people,

This week end I will commit changes that affects authentication way. 

Plan:
 - move validation from user class to manager class
 - SHA as default password encryption algorithm
 - PAM interface

-- 
Cheers,

Dmitriy Shabanov

On Fri, Mar 19, 2010 at 6:48 PM, Dmitriy Shabanov <sha...@gm...> wrote:
> Hello good people,
>
> This week end I will commit changes that affects authentication way.
>
> Plan:
>  - move validation from user class to manager class
>  - SHA as default password encryption algorithm
>  - PAM interface

thx for the notification on this.

J

On Fri, 2010-03-19 at 22:48 +0500, Dmitriy Shabanov wrote:
> Hello good people,
> 
> This week end I will commit changes that affects authentication way. 
> 
> Plan:
>  - move validation from user class to manager class
>  - SHA as default password encryption algorithm
>  - PAM interface

 - move /system/users.xml to /system/accounts/users.xml & groups.xml

-- 
Cheers,

Dmitriy Shabanov

On Fri, 2010-03-19 at 14:11 -0400, Joe Wicentowski wrote:
> Hi Dmitriy,
> 
> Sounds good, but one question:
> 
> >>  - PAM interface
> 
> What's this?

http://en.wikipedia.org/wiki/Pluggable_Authentication_Modules

-- 
Cheers,

Dmitriy Shabanov

On Fri, 2010-03-19 at 23:15 +0500, Dmitriy Shabanov wrote:
> On Fri, 2010-03-19 at 14:11 -0400, Joe Wicentowski wrote:
> > Hi Dmitriy,
> > 
> > Sounds good, but one question:
> > 
> > >>  - PAM interface
> > 
> > What's this?
> 
> http://en.wikipedia.org/wiki/Pluggable_Authentication_Modules

For something like
http://jpam.sourceforge.net/documentation/configuration.html

-- 
Cheers,

Dmitriy Shabanov

Hi Dmitriy,

Sounds good, but one question:

>>  - PAM interface

What's this?

Joe

Hi,

>  - move validation from user class to manager class
>  - SHA as default password encryption algorithm

please remember: user validation has to be backwards compatible with
all older eXist versions by default! Reason: I do not know the clear
text passwords of my user. If you change the algorithm, they would be
all lost.

Wolfgang

On Fri, 2010-03-19 at 21:01 +0100, Wolfgang Meier wrote:
> >  - move validation from user class to manager class
> >  - SHA as default password encryption algorithm
> 
> please remember: user validation has to be backwards compatible with
> all older eXist versions by default! Reason: I do not know the clear
> text passwords of my user. If you change the algorithm, they would be
> all lost.

Yes, for sure.

-- 
Cheers,

Dmitriy Shabanov

On Fri, 2010-03-19 at 22:48 +0500, Dmitriy Shabanov wrote:
> This week end I will commit changes that affects authentication way. 
> 
> Plan:
>  - move validation from user class to manager class

This one is done. Let me know if any problem.

-- 
Cheers,

Dmitriy Shabanov

Turning on OpenID in extensions/local.build.properties does not compile the OpenID code.

On Mar 21, 2010, at 04:38 PM, Dmitriy Shabanov wrote:

> On Fri, 2010-03-19 at 22:48 +0500, Dmitriy Shabanov wrote:
>> This week end I will commit changes that affects authentication way. 
>> 
>> Plan:
>> - move validation from user class to manager class
> 
> This one is done. Let me know if any problem.
> 
> -- 
> Cheers,
> 
> Dmitriy Shabanov
> ------------------------------------------------------------------------------
> Download Intel&#174; Parallel Studio Eval
> Try the new software tools for yourself. Speed compiling, find bugs
> proactively, and fine-tune applications for parallel performance.
> See why Intel Parallel Studio got high marks during beta.
> http://p.sf.net/sfu/intel-sw-dev_______________________________________________
> Exist-development mailing list
> Exi...@li...
> https://lists.sourceforge.net/lists/listinfo/exist-development

Fixed.

On Sun, Mar 21, 2010 at 11:30 PM, Loren Cahlander
<lor...@gm...> wrote:
> Turning on OpenID in extensions/local.build.properties does not compile the OpenID code.

the build scrips needed to be reviewed,  made in sync with other files.

D.

-- 
eXist-db Native XML Database - http://exist-db.org
Join us on linked-in: http://www.linkedin.com/groups?gid=35624

Thread: [Exist-development] Security refactoring

eXist-db is a feature rich Open Source native XML database

exist-development